Usually there will be some output in Ambari UI console. Check in the output of HDFS service start. ... View more

Groups stored in Ranger DB are used only for displaying in Ranger UI and at the time of policy authoring. At run time, component (in your example Hive) should pass along the group information of the authenticated user to ranger plugin. Typically you can run "hdfs groups <user>" to find out what groups does the user belong to. Expectation is that Components will use the same source as Ranger to provide users/groups mapping. ... View more

Yes, modify web.xml directly on Ranger admin host. ... View more

You can use DB replication to keep both policy DB in sync. ... View more

In Kerberized environments, repository config user should be a valid kerberos principal. Please create a valid principal like keyadmin@DOMAIN.COM with password and configure this in KMS repo - this needs to be done in ranger UI. Steps are listed here. Although this is from latest documentation, these steps should work. After repository is updated, Ranger and KMS needs to be restarted. Also make sure you have a link to core-site.xml under /etc/ranger/kms/conf as described here ... View more

@Richard Xu - Can you please execute the below command in MySQL and retry the install? SET GLOBAL log_bin_trust_function_creators = 1 If you'd like to roll back to the default value of 0, you can do that after the install goes through. ... View more